Authforce

Authforce is a handy tool for testing HTTP authentication. It attempts different username and password combinations to ensure the security of your site. By checking the strength of your passwords, it highlights the common issue of weak password selection by users.

How to Use Authforce

Using Authforce is straightforward. Ensure your data files contain the usernames and passwords for testing. Then, run Authforce with the URL of the site you intend to check. While you cannot disable specific methods currently, you can create an empty data file to achieve the same effect. For example, avoiding the concat method due to inadequate data lists.

Session Support

A notable feature of Authforce is its session support. Initiate Authforce with the -s option to enable session support. To halt testing or take a break, simply press CTRL+C or use 'kill -INT pid.' This action saves your progress in a file named session.save for continuing later.

Create Your Own Data Lists

The default data lists may lack comprehensiveness currently. You have the option to create your own lists or search for suitable ones online. Notably, tools like John the Ripper offer quality lists for reference. If you develop a robust list, consider sharing it with the community. To resume a session in the future, type 'authforce -r'.

Password File Syntax Changes

The password.lst file has undergone updates introducing special keywords like {username} and {emanresu}. These keywords incorporate the username and its reverse in your testing. For instance, utilizing {username}123 or {username}{emanresu} is encouraged. Share any innovative keyword ideas for further enhancement.

What's New in This Release:

• Fixes a bug related to using --username-file with an absolute path.


• Updates to the autoconf setup for improved performance.

If you seek additional information or wish to download Authforce, explore SoftPas for the latest updates!